| #1251 | Futurio Extra | 23 | 787 | 205 | 20k+ | | | Text Domain Mismatch |
| #1252 | WPC Frequently Bought Together for WooCommerce | 40 | 63 | 109 | 10k+ | | | Output is not escaped |
| #1253 | Index WP MySQL For Speed | 25 | 250 | 255 | 50k+ | | | Output is not escaped |
| #1254 | Captcha Code | 97 | 17 | 12 | 100k+ | | | wp function not compatible with requires wp |
| #1255 | Use Google Libraries | 35 | 13 | 5 | 10k+ | | | Hidden files included |
| #1256 | Gmail SMTP | 37 | 85 | 71 | 10k+ | | | Unsafe printing function |
| #1257 | LWS Optimize – All-in-One Speed Booster & Cache Tools | 27 | 34 | 518 | 10k+ | | | Non-prefixed global variable |
| #1258 | GN Publisher: Google News Compatible RSS Feeds | 86 | 76 | 6 | 20k+ | | | wp function not compatible with requires wp |
| #1259 | Content Blocks (Custom Post Widget) | 80 | 6 | 2 | 10k+ | | | Output is not escaped |
| #1260 | Void Contact Form 7 Widget For Elementor Page Builder | 28 | 279 | 66 | 10k+ | | | Text Domain Mismatch |
| #1261 | Cloudways WordPress Migrator | 82 | 6 | 9 | 20k+ | | | Database parameter is not escaped |
| #1262 | WP Performance Score Booster – Optimize Speed, Enable Cache & Page Preload | 39 | 59 | 27 | 10k+ | | | Unsafe printing function |
| #1263 | Cost of Goods: Product Cost & Profit Calculator for WooCommerce | 35 | 21 | 29 | 9k+ | | | Missing Translators Comment |
| #1264 | Mailjet Email Marketing | 24 | 435 | 206 | 10k+ | | | Unsafe printing function |
| #1265 | Product Gallery Slider, Additional Variation Images for WooCommerce | 28 | 552 | 316 | 20k+ | | | Output is not escaped |
| #1266 | AutomatorWP – Automator plugin for no-code automations, webhooks & custom integrations in WordPress | 24 | 1,705 | 1,393 | 7k+ | | | Text Domain Mismatch |
| #1267 | Animate It! | 39 | 137 | 16 | 20k+ | | | Text Domain Mismatch |
| #1268 | Simple Job Board | 22 | 634 | 1,355 | 10k+ | | | Non-prefixed global variable |
| #1269 | PDF Poster – Display PDF Files with Custom Viewer | 100 | | 0 | 20k+ | | | No open findings |
| #1270 | Custom Taxonomy Order | 42 | 20 | 56 | 50k+ | | | Output is not escaped |
| #1271 | Astra Customizer Reset | 97 | 7 | 1 | 30k+ | | | Text Domain Mismatch |
| #1272 | Google Authenticator | 41 | 39 | 65 | 20k+ | | | Output is not escaped |
| #1273 | Shipping Live Rates and Access Points for UPS for WooCommerce | 90 | 6 | 11 | 7k+ | | | Non-prefixed global variable |
| #1274 | Pochipp | 35 | 27 | 102 | 20k+ | | | Non-prefixed global variable |
| #1275 | WP User Manager – User Profile Builder & Membership | 24 | 787 | 539 | 10k+ | | | Exception output is not escaped |
| #1276 | افزونه حمل و نقل ووکامرس | پست پیشتاز، تیپاکس و پیک موتوری | 28 | 131 | 190 | 20k+ | | | Missing nonce verification |
| #1277 | Wicked Folders – Folder Organizer for Pages, Posts, and Custom Post Types | 39 | 89 | 117 | 20k+ | | | Unsafe printing function |
| #1278 | CrawlWP SEO – Instant Search Engine Indexing & SEO Performance Monitor | 37 | 47 | 90 | 40k+ | | | Dynamic hook name |
| #1279 | Piotnet Addons For Elementor | 88 | 744 | 26 | 30k+ | | | Text Domain Mismatch |
| #1280 | MapGeo – Interactive Geo Maps | 59 | 14 | 51 | 40k+ | | | Non-prefixed hook name |
| #1281 | Say What? | 99 | 3 | 2 | 40k+ | | | Missing direct file access protection |
| #1282 | ERP: Complete HR, Accounting & CRM Suite Built for WooCommerce | 23 | 828 | 5,968 | 5k+ | | | Direct Query |
| #1283 | YML for Yandex Market | 35 | 18 | 288 | 10k+ | | | Non-prefixed global variable |
| #1284 | Rate My Post – Star Rating Plugin by FeedbackWP | 27 | 222 | 360 | 20k+ | | | Output is not escaped |
| #1285 | Shapely Companion | 38 | 49 | 39 | 10k+ | | | Output is not escaped |
| #1286 | افزونه پیامک ووکامرس Persian WooCommerce SMS | 31 | 72 | 269 | 40k+ | | | Nonce verification recommended |
| #1287 | WP-Print | 35 | 110 | 52 | 8k+ | | | Unsafe printing function |
| #1288 | WP Events Manager | 27 | 294 | 415 | 30k+ | | | Output is not escaped |
| #1289 | Swift Performance Lite | 22 | 2,346 | 1,325 | 6k+ | | | Text Domain Mismatch |
| #1290 | VS Contact Form | 55 | 3 | 318 | 7k+ | | | Non-prefixed global variable |
| #1291 | Themesflat Addons For Elementor | 28 | 714 | 227 | 40k+ | | | Output is not escaped |
| #1292 | Customify | 95 | 1 | 101 | 10k+ | | | Non-prefixed global variable |
| #1293 | Pz-LinkCard | 25 | 954 | 1,618 | 20k+ | | | Non-prefixed global variable |
| #1294 | Email Template Designer – WP HTML Mail | 34 | 62 | 80 | 20k+ | | | badly named files |
| #1295 | افزونه پرداخت امن زرینپال برای ووکامرس (ZarinPal for WooCommerce) | 99 | | 7 | 50k+ | | | Non-prefixed class |
| #1296 | PageSpeed Ninja – Cache, Minify, Defer CSS JavaScript, Critical CSS, Optimize Images, Convert WebP | 22 | 984 | 407 | 5k+ | | | Unsafe printing function |
| #1297 | WP BackItUp Community Edition | 23 | 257 | 989 | 6k+ | | | Non-prefixed global variable |
| #1298 | Twitter | 64 | 27 | 23 | 9k+ | | | Missing Translators Comment |
| #1299 | Invoices for WooCommerce | 35 | 55 | 168 | 10k+ | | | Non-prefixed global variable |
| #1300 | jQuery Pin It Button for Images | 38 | 129 | 36 | 10k+ | | | Output is not escaped |